Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-26026

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6.

VectorNETWORK

PublishedApr 06, 2026, 15:17

Published Bysecurity-advisories@github.com

Base Score

Score7.2

Affected Versions

No affected versions found.

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-2c98-648q-h27h

Weakness Type

CWE-94

CVSS Metrics

Base Score

7.2

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK